Unexpected memory consumption during token parsing in golang.org/x/oauth2

Overview

Source
ID
GO-2025-3488
Aliases
CVE-2025-22868
Affected package

Description

An attacker can pass a malicious malformed token which causes unexpected memory to be consumed during parsing.

Summary

93.61k
Total packages affected
Packages with at least one version that is affected by the advisory or has an affected dependency.
2.10k
Packages with a known fix
Packages with versions affected by the advisory that have a greater version that is not affected.
6.97%
Total ecosystem affected
The proportion of packages in the ecosystem that are affected by the advisory (fixed or not).
Affected Version: Introduced: 0, Fixed: 0.27.0
Affected
v0.24.0
v0.23.0
v0.22.0
v0.21.0
v0.20.0
v0.19.0
v0.18.0
v0.17.0
v0.16.0
v0.15.0
v0.14.0
v0.13.0
v0.12.0
v0.11.0
v0.10.0
v0.9.0
v0.8.0
v0.7.0
v0.6.0
v0.5.0
v0.4.0
v0.3.0
v0.2.0
v0.1.0